Skip to content

[Python]: CWE-117 Log Injection  #388

Closed
@haby0

Description

@haby0

Query

Link to pull request with your CodeQL query:

Relevant PR: github/codeql#6182

CVE ID(s)

List the CVE ID(s) associated with this vulnerability. GitHub will automatically link CVE IDs to the GitHub Advisory Database.

  • CVE-20nn-nnnnn

Report

If unsanitized user input is written to a log entry, a malicious user may be able to forge new log entries.

  • Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). We would love to have you spread the word about the good work you are doing

Result(s)

Provide at least one useful result found by your query, on some revision of a real project.

Metadata

Metadata

Assignees

No one assigned

    Labels

    All For OneSubmissions to the All for One, One for All bounty

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions